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Abstract 



We give an explicit version of Shimura's reciprocity law for singular values 
QQ , of Siegel modular functions. We use this to construct the first examples of 

class invariants of quartic CM fields that are smaller than Igusa invariants. 



1 Introduction 



The values of the modular function j in imaginary quadratic numbers r are 
algebraic, and generate abelian extensions of K = Q(t). These values enable 
explicit computation of the Hilbert class field of K and of (cryptographic) elliptic 
curves over finite fields with a prescribed number of points (the "CM method" ) . 
^vq . However, these algebraic numbers j(r) have very large height, which limits 

^ 1 their usefulness in such explicit applications. So we consider arbitrary modular 

functions / instead, whose values are again abelian over K, hoping to find num- 
bers of smaller height. If these values /(r) generate the same field as j(r), then 
we call them class invariants, and they can take the place of j(r) in applications. 

Being abelian over K, the values /(r) are acted upon by ideals (and ideles) 
of K via the Artin isomorphism. Shimura's reciprocity law expresses this action 
in terms of a GL2-action on the modular functions / themselves, and an explicit 
version of this reciprocity law allows one to search for class invariants in 

a systematic way. 

There exists a higher-dimensional CM-method, with applications to hyper- 
" elliptic curve cryptography and a more general analytic construction of class 

fields [31 [H]. A significant speedup will be obtained by replacing the "Igusa 
invariants" in this construction by smaller class invariants. 

Shimura gave various higher-dimensional analogues of his reciprocity law [131 - 
ITB] . and our main result fTheorems l2.2lE^l below) is an explicit version, suitable 
for finding class invariants of orders in CM- fields, that is, orders in K = Q(vcZ) 
with d a totally negative algebraic number. We use this to find the first examples 
of small class invariants of quartic CM- fields (Section [5]). 

Our explicit reciprocity law takes the following form. Fix a CM point r € Tig 
in the Siegel upper half space, and let TV be a positive integer. Assume that 
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the CM-type $ of r is primitive, and let $ r be its reflex. Let J-jv be the field 
of Siegel modular functions of level N with g-expansion coefficients in Q(0\r). 
Assume for the sake of this introduction that r has CM by a maximal order 
Ok C K . Then given an ideal o of K r coprime to N, Theorem 12.41 (our main 
result) gives explicit U G GSp 2g (Z/7VZ) and M € GSp 29 (Q)+ with 

f(r) a = f u (Mr). (1.1) 

Here a acts on /(r) via the Artin map, and the actions of U and M on Fm 
and T-Lg are standard, and given Section [2l 

We use this reciprocity law to give the ideal group corresponding to the field 

H{N) = K r (/(r) :feF N ) 

in Theorem O 

If one considers only the Galois group Gal(H(N) fH(l)) , then U and M 
of (jl.ll) become particularly simple to express. Given o, there exists [i € K 
such that [iOk — N^[a) and /i/I £ Q. For any such /j,, let U be the matrix 
of right multiplication by (i with respect to the symplectic basis corresponding 
tor. Theorem 12.31 then states 

f(T) a = f U (r). (1.2) 

We have programmed the actions (jl.ll) and (|1.2[) into Sage [23] and made 
the program available online at [23]. Via Sage, this program uses PARI [27] for 
most of the number field functionality, such as computation of ray class groups. 

The action (|1.2I) allows us to show that /(r) is in T-L{\) by considering only 
the action of some matrices U on Fn- If /(t) is in H(l), then the main theorems 
(Theorems 12.21 and 12. 4[) allow us to numerically verify K r (f(r)) = H(l), i.e., 
that /(t) is a class invariant, and compute the minimal polynomial Hf of /(t) 
over K 1 . 

The polynomial Hf becomes simpler to express and compute if its coefficients 
are in the maximal totally real subfield Kq C K r . Proposition 12.71 gives a 
sufficient condition for this to happen. 

The proofs of these results are in Sections [3J and HI The action of U becomes 
most explicit when expressing / in terms of theta constants. This is Section [5] 
and will be used for our examples in Section [6] These are the first known 
examples of class invariants of quartic CM-fields that are smaller than Igusa 
invariants. 

Finally, Section [7J treats the applications to computational class field theory 
and to the construction of curves over finite fields. The final three sections ([SHU 
can be read independently of Sections [3] and |4j 

2 Definitions and statement of the main results 
2.1 The upper half space 

Fix a positive integer g. The Siegel upper half space % — H g is the set of g x g 
symmetric complex matrices with positive definite imaginary part. It paramet- 
rizes ^-dimensional principally polarized abelian varieties A over C together 
with a symplectic basis b\ , . . . , b 2g of their first homology. 
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In more detail, an abelian variety over C is always of the form A = C 9 /A 
for a lattice A of rank 2g. A polarization is given by a Riemann form, i.e., 
an R-bilinear form E on C 9 that restricts to a bilinear form A x A — > Z and 
such that (u, v) k> E(iu, v) is symmetric and positive definite. Given a basis 
of A, there is a matrix, which by abuse of notation we also denote by E, such 
that E(u,v) = u Ev. We say that E is principally polarized if E has determin- 
ant 1. In that case, there exists a symplectic basis, i.e., a basis such that E is 
given in terms of (g x g)-blocks as 

"-(-! »■ 

To a point r € H g , we associate the principally polarized abelian variety with 
A = rZ 9 + Z 9 and symplectic basis rei, . . . , re g , ei, . . . , e g , where e, is the i-th 
basis element of Z 9 . Conversely, given a principally polarized abelian variety 
and a symplectic basis, we can apply a C-linear transformation of C 9 to write 
it in this form [TJ Chapter 8]. 

2.2 The algebraic groups 

Given a commutative ring R, let 

GSp 2g (i?) = {A e M&t 2g (R) : A^A = uQ with v e R x }. 

Note that v defines a homomorphism of algebraic groups GSp 2g — > G m , and 
denote its kernel by Sp 2& . For g = 1, we have simply GSp 2g = GL 2 , v = dct, 

S P2g = SL 2- 

The homomorphism v has a section i, satisfying vi = idc m , given bj0 

For any ring i? for which this makes sense, we also define 

GSp 23 (i?)+ = {A e GSp 2g (i?) : i/(^4) > 0}. 
The group GSp 2g (Q) + acts on H s by 

( ° J V = (ar + 6)(cr + ( i)- 1 , 

where a, b, c, d are (g x g)-blocks. Changes of symplectic bases correspond to 
the action of Sp 2g (Z) C GSp 2g (Q) + (see Lemma [4.61 below). It follows that 
Sp 2g (Z)\"H parametrizes the set of isomorphism classes of principally polarized 
abelian varieties of dimension g. 

It is known that the natural map Sp 2g (Z) — > Sp 2g (Z/iVZ) is surjective [12j 
Thm. VII. 21], and we denote its kernel by r^. 

^^Warning: our i differs from Shimura's i in the sense that i(t) = t(t) _1 
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2.3 Modular forms and group actions 

A Siegel modular form of weight k and level N is a holomorphic function / : 
H -> C such that for all A = ( a c b d ) G IV, we have /(At) = det(cr + d) k f(r), 
and which is "holomorphic at the cusps" . We will not define holomorphicity at 
the cusps, as it is automatically satisfied for g > 1 by the Koecher principle [5], 
and is a standard (textbook) condition for g = 1. 

Any modular form / has a Fourier expansion or q-expansion 



f(r)=J2 a ^> a « €C ' 9 S ■■= exp(2mTr(£T)/N), (2.1) 



where £ runs over the symmetric matrices in Mat fl (|Z) with integral diagonal 
entries. The numbers are the coefficients of the g-expansion. 
Let and J-^ be the fields 



N 



gi _ are Siegel modular forms of equal weight and level N, 
g 2 ' with (/-expansion coefficients in Q(Ctv), and (72 ^ 



and -Fqo = U^^at. 

The following group actions appear in many places in the literature and are 
natural when interpreted in terms of the moduli interpretation of Fn- We state 
them here in such a way that we can directly apply them to modular forms, and 
give a proof in Section [3] 

Proposition 2.1. There are well-defined right group actions given by 

1. J- 00 OGSp 29 (Q)+ f A (r) := f{Ar), 

2. JVGSp 2a (Z) f A (r) := f(Ar), 

3. F N OSp 2g (Z/NZ) y(A mod N) ._ jA f or a \\ J{ G Sp 2g (Z), 

4. J-jv O i((Z/NZ) x ) the natural Galois action of (Z/NZ) X 

on the g-expansion coefficients, i.e., if 

/ = Ef.fc fc )C^^ for some o(£, fc) e Q, 

then/*) :=E € a(f.*X^, 

5. .Fjv O GSp 2g (Z/NZ) extending the actions of both i{{Z/NZ) x ) 

and Sp 2g (Z/A r Z) simultaneously. 

Given A € GSp 2g (Z/7VZ) and / € .F/v, how would one compute J' 4 ? First, 
take i = and notice A = i(t)B with B = i(t)- 1 A € Sp 2g (Z/NZ). Next, 

lift B to B e Sp 29 (Z), and note / A = (/ i (*)) B o. 

The only part that we are not making completely explicit is the lifting from 
Sp 2s (Z/7VZ) to Sp 2g (Z) in the action of Proposition 12.11 3. However, there are 
multiple ways to deal with this. When / G J-^ is expressed in terms of theta 
constants, there is a formula for the action of GSp 2g (Z/A r Z) on / (Section [5]) 
that does not require finding a lift, and we will use that formula. In general, 
a lift can be found by following the steps of the proof of [T^l Thm. VII. 21]. It 
is also possible to express an element of Sp 2s (Z/7VZ) as a product of standard 
generators of Sp 2ff (Z) (and in the case g = 1, this results in explicit formulas of 
[5j Lemma 6]). 



4 



Marco Streng - Explicit Shimura reciprocity for Siegel modular functions 



2.4 Complex multiplication 

Suppose A is a (/-dimensional polarized abelian variety over C with complex 
multiplication, i.e., such that End(A) (g> Q contains a CM-field K of degree 2g. 

It is known that any such A can be obtained as follows. Let $ = . . . , <p g } 
be a CM-type, i.e., a set of g embeddings K — > C such that no two are complex 
conjugate. By abuse of notation, write $(x) — (0i(x), . . . , 4> g (x)) £ C 9 for x e 
K. Let b be a lattice in if, i.e., a non-zero fractional ideal of an order of K. Let 
£ € if be such that for all <fi € the complex number (/)(£) lies on the positive 
imaginary axis, and such that the bilinear form E^ : if x if — > Q : (x, y) i— >■ 
Tr(lFy£) maps b x b to Z. Let A = C 3 / $(b) and let a polarization on A be given 
by extended R-linearly from b to C 9 . Finally, let O = {x E if : xb C b} be 
the multiplier ring of b, and embed it into End(A) by taking x$(u) — &(xu) 
and extending this linearly. 

Any CM-point r thus corresponds to a quadruple ($, b, £, B) with $, b and 
£ as above and B = (bi, . . . , &2 9 ) a symplectic basis of b for the pairing E^. We 
will make the reciprocity law explicit in terms of such quadruples, and note that 
one obtains r with the formula 

r=($(6 s+1 )|-..|$(6 29 ))- 1 ($(6 1 )|...|$(6 g )). 

We will assume that $ is a primitive CM-type, or, equivalently, if = 
End(A) ® Q (0 Thms. 1.3.3 and 1.3.5]). We then have O = End(A). 

2.5 The type norm 

The type norm iV$ : K — > C is the map 

Nq> '. x i y J^J <^>(x). 

Its image generates the reflex field if r of $, and there is a reflex type norm map 
N& : if 1 ->• if : x h-> TJ ^(V), 

where the product is taken over the reflex type, i.e., those embeddings ip : if r —> 
K such that there is a map <fi : if — > C with 4> o ?/> = id/fr and €E $. 
The reflex type norm extends to ideals via ([201 Proposition 29 in § 8.3]) 

N*(a)0 L = [] (V>(a)0 L ). 

2.6 The class fields generated by complex multiplication 

Fix a CM-point r and let the notation be as above. We will study the field 
H(N) generated over if r by the values of f(r) as / ranges over the elements 
of J-jv that do not have a pole at r. It is an abelian extension of if r , and our 
first theorem gives the corresponding ideal group. To state it, we need some 
additional definitions. 
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Let O be an order in K and let F € Z be the least positive integer such that 
O D FOr- For x € K, we write 



1 mod x NO 



(x - 1)/N e O ® Z p for all p | AT, and 
ie(0«Z p ) x ' for all p | F. 



Equivalently, we have x = 1 mod x A^O if and only if x = a/6, where both a 
and 6 are elements of O that are invertible modulo F and 1 modulo N. 

The following theorem is analogous to [5D1 Main Theorem 3 in §17]. We will 
prove it using the reciprocity law. Recall that F is the smallest positive integer 
satisfying FO K C O. 

Theorem 2.2. The extension T-L{N)/K r is abelian and of conductor divid- 
ing NF. Its Galois group is isomorphic via the Artin isomorphism to the group 
I(NF)/H$ t o(N), where I(NF) is the group of fractional Ok 1 -ideals coprime 
to NF, and 

( N^(a) = nO K 

H^ : o(N) = ne I(NF) :3^£K with fxp = N{a) € Q 
[ fj, = 1 mod x NO 

Note that H(N) depends only on O and $. 
2.7 The explicit reciprocity laws 

From TheoremHa we get G&\{H N /Hi) = (I(NF) n H^ t0 {l))/H^ i0 (N). The 
following reciprocity law makes the Galois action of I(NF) D -ff$,o(l) explicit. 

Theorem 2.3. Given a CM point t £ % and a positive integer N , let the 
notation be as above. For any a £ I(NF) n ^$^0(1), let [a] be its class modulo 
H$ t o(N), and let fj, be as in the definition of H$ t o(l). Then the action of [a] 
on /(t) for any f € J-jy is given by 

/(T) w = r w (r)) 

where e(/z) is the transpose of the matrix of (left) multiplication by /j, with respect 
to the basis b\ , . . . , &2g of Section \2.4\ in other words, the columns of e* are the 
/ibi expressed in terms of the basis bi . 

In other words, consider the homomorphism 

I(NF) fl 

[a] 1 — ► e(/x), 



r - J An GS P2g (Z/NZ)/S 



where S is the image in GSp 2g (Z/A^Z) of the stabilizer Stab r C Sp 29 (Z) of r. 
Then we have 

f{r) a = f r[a \r). 

If a is principal, then the reciprocity map becomes even more explicit: 

r((a)) = e(AT$r(a)) for a e K 1 with (a) e I(NF). 

The following more general version of the reciprocity law gives the action of 
any a € I(NF). 
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Theorem 2.4. Given a CM point r £ % and a positive integer N , let the nota- 
tion be as above. For any a £ I(NF), choose a symplectic basis C of N$* b 
with respect to E N ^ a ^. 

Let M be the matrix with as rows the elements of C expressed in terms 
of B . In other words, if B and C are matrices with the elements of B and C 
as columns, written in terms of some Q-basis of K , then C = BM . 

Then M is in GSp 2g (Q) + and is N -integral and invertible mod N . Moreover, 
its inverse U is in GSp 2s (Z/./VZ), and for any f £ Tn, we have 

f(T)W=f UM (T)=f u (Mr). (2.2) 

Remark 2.5. Computing symplectic bases is easy. Use the symplectic_f orm 
command on integer matrices in Sage |23j or FrobeniusFormAlternating in 
Magma [2 , or see [551 Algorithm 4.2]. The rest of the theorem is completely 
explicit. 

2.8 Complex conjugation 

Now assume /(r) is in %(1), which can be checked using the reciprocity law. A 
priori, the coefficients of its minimal polynomial Hf over K 1 are elements of K r . 
We now give a new result, which in many cases gives us a way to make sure the 
coefficients are in the smaller field Kq. 

Let Ai := Q(/(t) : / £ F\) be the field of moduli of the principally polarized 
abelian variety corresponding to r, and let AAq = AdKjj. Then by definition, 
we have = M.qK t , and H(l)/Aio is an extension of degree at most 2. 

We will concern ourselves with the case where this degree is exactly 2, and 
the following lemma tells us when this is the case. 

Lemma 2.6. Suppose r corresponds to a pair (b,£). 

f . The degree of W(l)/A4o equals 2 if and only if there is an ideal a £ 1(F) 
and an element \i € K* such that A r $r ! c>(a)b — fib and /fp £ Q. 

2. If g < 2 and O — Ok, then the conditions in part 1 are satisfied and we 
can take 

(a) g = 1, a= N^>(b/b) and [i = 1; or 

(b) g = 2, a = 7V$(b) and /i = N K/Q (b). 

3. If b = O, then the conditions in part I are satisfied and we can take 
a = Ok « and /x = 1. 

Proposition 2.7. Assume deg H(l)/M-o — 2 and suppose /(t) £ H(l). 

Let (a, /i) be as in Lemma r2.6I I and assume without loss of generality that 
a is coprime to N. Let B = (b\, . . . , b g , b g+ i, . . . , 6 2s ) be the symplectic basis 
of b corresponding to t, and let M be the matrix with as rows the elements 
of C = . . . , [i~ 1 b g , ii~ 1 b g +i, . . . , /i _1 &2g) expressed in terms of B. In 

other words, if B and C are interpreted as matrices with the given elements as 
columns, then C — BM t . 

Then M is finite and invertible modulo N. Let U £ GSp 2g (Z/NZ) be its 
inverse. Then the following are equivalent: 

1- f(r) £ Mo 
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2. f u (r) = f(r) 

If these conditions are satisfied, then the minimal polynomial of /(r) over K T 
has coefficients in Kq. 

We will prove these results in Section 14.51 These results show that, if we 
restrict to / that satisfy f u — /, this ensures that the minimal polynomial of 
/(t) over K* is defined over Kq. 

3 The adelic version 

Shimura developed his reciprocity laws for various types of multivariate modular 
functions, modular forms, and theta functions in a series of articles [T3lU8| . See 
also the textbook [19j 26.10]. 

Rather than reproving the reciprocity law in our setting, we will quote a 
streamlined version stated by Shimura in the language of ideles and rework it 
(in Section [4]) into a version with ideals and a more explicit group action. This 
means that our proof will not be the most direct proof, as the adelic statement 
mashes all levels N together, and we take them apart again; and Shimura's 
original series of articles starts with theta functions, while we give them as 
a special case afterwards (Section [5])- However, our approach does allow us 
to give both the computationally practical and the elegant adelic statement, 
explain how they are related, and keep the proofs short at the same time. 

The reader who is not interested in this proof, or would like to see the 
applications first, is advised to skip ahead and read Sections [5] (possibly without 
the proofs), and [6] and [7] first. They are independent of Sections |3] and [U which 
contain the proofs of the statements from Section [5J 

We start by citing Shimura's adelic action of GSp 2g , and linking it to the 
actions of Proposition [2Tj In particular, this will prove Proposition 12. 11 albeit 
in a rather indirect way. 

Let A be the ring of adeles of Q and call an element of its unit group positive 
if its R-component is positive. Let Z = lim^ Z/iVZ be the ring of finite integral 
adeles, so A = (Z ® Q) x R. 

Proposition 3.1. Let Aut(J r QO ) be the automorphism group of the field J-^. 
There is a unique homomorphism GSp 2s (A) + — > Aut(^" oc ) satisfying 

1. for x G A x and / G J^, we define f^ x ' as / where x acts on its Fourier 
coefficients, 

2. for A G GSp 2g (Q) + , /eJ^reW, we have f A (r) = /(At), 

3. for any N, the group S = {ie GSp 2ff (Z) : A = 1 mod x N} x GSp 2g (R)+ 
acts trivially on any / G J^n, where we write A = 1 mod x N iff for all 
p | N we have A p G 1 + ATVIat 2s (Z p ). 

Proof. Existence is a special case of [THl Thm. 5(v,vi,vii)]. Uniqueness follows 
from the proof of [18, Proposition 1.3]. □ 

Remark 3.2. Our reference for existence in Proposition 13.11 though directly 
applicable to our situation, may not be satisfactory to some readers, as it does 
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not contain the proof. The action is constructed in [13l Section 2.7] for a field 
ks(Vs). The field ks(Vs) is defined without g-expansions, hence that reference 
only contains a weak version of 1, but 2 is [T21 (2.7.2)] and 3 follows immediately 
from 13, (2.5.3a)]. 

Our stronger version of 1, as well as the link between JF^ and ks(Vs), is 
given in [T^] . Both that reference and [TSJ § 6] claim that the proof is exactly 
the same as in the Hilbert modular case, which is [IB] . 

Next, we make the action of GSp 2g (Z) on Tn explicit as a first step towards 
making the reciprocity law more explicit. 

Proposition 3.3. The action of Proposition 13.11 has the following property: 
4. For any positive integer N, any / G J-jy, and any 

A = (AuA^) G GS P2s (Z) x GS P2g (R)+ c GSp 2g (A)+, 

we have f A G Jjv, and f A depends only on (A { mod N) € GSp 2 (Z/iVZ). 
Moreover, the induced action of GSp 2g (Z/AZ) on Fm is exactly as in 
Proposition 12.11 

Proof. The fact f A e J-n follows from the construction of the action (see (T3l 2.7 
and (2.5.3)] and Remark 13.21 above). That f A depends only on (Af mod N) is 
Proposition 13. 11 3. It follows that the action induces an action of GSp 2ff (Z/AZ) 
on .Fjv. To prove that this action is as in Proposition 12.11 it remains only to 
compute this action for B G Sp 2g (Z/iVZ) and for B = i(t) with t G (Z/NZ) X . 

In case of B <E Sp 2ff (Z/iVZ), we lift B to A 1 e Sp 2g (Z) (possible as mentioned 
before). As we have 

Sp 2g (Z) = GS P2g (Q)+ n (GSp 2g (Z) x GS P2g (R)+), 

we can then apply Proposition 13.11 2 to find that the action of B is as in Pro- 
position [2Tj In case of B — i(t) with t e (Z/NZ) X , we lift t to Z x and apply 
Proposition 13. 11 1. □ 

Proposition 12.11 now follows without having to do any work. 

Proof of Provosition \2.1[ Proposition 13. 11 2 gives the action of GSp 2g (Q) + . Re- 
stricting the action instead to Af £ GSp 2g (Z) and / G J-jv yields the actions 
of GSp 2g (Z/iVZ) and its subgroups, as well as the action of Sp 2g (Z), by Pro- 
position □ 

Let t G H correspond to a simple principally polarized abelian variety 
C 9 /tZ 9 + Z 9 with complex multiplication by K. Let e : K -> Mat 2ff (Q) be 
the ring homomorphism sending x G K to the matrix of left multiplication by x 
with respect to the symplectic basis corresponding to r. Assume the CM-type $ 
to be primitive. 

The type norm A$r and the map e induce adelic maps N& : -> K£ 
and e : K£ -> GSp 2s (A) + . 

Shimura gives the following reciprocity law, stated in a very sleek manner 
using the action of Proposition 13.11 
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Theorem 3.4 (Shimura's reciprocity law for Siegel modular functions). Let t 

and the notation be as above, and let g — e o 7V$r . Then for any f £ J-^ such 
that /(t) is finite and any x £ , we have 

f(r)GKl h and f{r) x = f^\r). 

Proof. This is exactly equation (3.43) of 18, p. 57]. (Actually that reference 
works with the abelian variety A = C 2 /(rZ™ + 5Z n ) for an integer S > 3, but 
that variety has CM by K if and only if ours has, so that the result for 6 = 1 
follows.) The matrix e(x) £ Mat 2g (Q) is defined differently and less explicitly 
in [IS], namely by p(x)(r, 1) = (t, l)e(x) where p(x) £ Mat s (C) is the matrix 
of multiplication by x with respect to the standard basis of C 9 . But since (r, 1) 
is exactly what maps the standard basis of Z 2s to C 9 , our matrix e(x) satisfies 
the definition of [TB]. □ 

Remark 3.5. As in Remark 13.21 a more original reference is [131 (2.7.3)] (equi- 
valently [H (6.2.3)]). See also [H 26.8(4)] for a textbook version. 



4 Proof of the main result 

Our main result is an explicit version of Shimura's reciprocity law: given / £ Fn 
and the image [a] of the idele x in a ray class group of K 1 , we need to give f 9 ^ 
in terms of the actions of Proposition First of all, we need to determine an 
appropriate modulus for our ray class group. This is done in Section 14.11 

Next, we will write g{x) = SUM with M £ GSp 2g (Q)+, U £ GSp 2g (Z), 

5 £ Stab/, and both M and (U mod N) explicit in terms of a. Then we can 
conclude /°(r) = /^^(t) = f {U m ° d N) (Mt). 

Remark 4.1. The strong approximation theorem for GSp 2s (A) in fact tells us 
( |18l Lemma 1.1]) that such a decomposition always exists, even with U £ i(Z x ). 
However, as in the genus-one case (Gee and Stevenhagen [6]), we will be satisfied 
with having only U £ GSp 2s (Z). In fact, by allowing U £ GSp 2g (Z), we can 
make sure Mr is in a fundamental domain for Sp 2fl (Z), which improves the 
speed of convergence when f( u mod N ) is expressed in terms of theta constants. 



4.1 The conductor 

Let the notation be as above and recall End(yl) = O, and FOk C O. 

Lemma 4.2. For a £ K , we have a £ O if and only if e(a) £ Mat 2ff (Z). 

Proof. We have a £ O if and only if ab C b, which is equivalent to e(a) £ 
Mat 2g (Z). □ 

Corollary 4.3. For a £ K, we have a = 1 mod x NO if and only if e(a) = 
1 mod x N and e(o) £ GL 2g (Z p ). 

Proof. Lemma 14.21 stays valid when considered locally at a prime number p, i.e., 
replacing O by O (8 Z p and Z by Z p for a prime p. We have a = 1 mod x NO if 
and only if (a — 1)/N eO®Z p for all p\N and a is invertible mod p for all p\F. 
The corollary follows if we apply the lemma to (a — 1)/N locally at all primes 
dividing TV and to a at all primes dividing F. □ 
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Recall the abelian extension H(N) = ^ r (/(r) : / £ F N ) of K 1 . 
Proposition 4.4. The conductor of H(N) divides NF. 

Proof. What we need to prove is equivalent to the statement that the subgroup 
Wnf = {x £ K T jf : x = 1 mod x NFOk'} acts trivially on Fn- So take any 
x G Wnf, and let y = e(N^r(x))~ 1 . Then Theorem l34l tells us that for all 
/ g F N , we have f{rf = /»(r). 

We have N&(x) = 1 mod x NFOk, hence N^(x) = 1 mod x NO. By 
Corollary 14.31 we find that y is in the set S of Proposition 13.11 It follows from 
that proposition that f v = /, hence x acts trivially on /(r) for all / G Fn- □ 

Before we compute the actual ideal group corresponding to the field H(N) 
(i.e., prove Theorem 12. 2p . we first determine the action of I(NF) (i.e., prove 
Theorems [24] and ESJ ■ 

4.2 The mundane properties of M 

Theorem 12.41 starts by stating that the matrix M of that theorem is in the 
group GSp 2g (Q) + . The purpose of the current section is to prove this. 

Recall that M G GL 2g (Q) is defined by C = BM t where the columns of B 
and C are symplectic bases of the lattices b and AT$r i0 (a) _1 b with respect to 
polarizations and E N ( a )^- 

Lemma 4.5. Let M be as above. Then we have M G GSp 2g (Q) + . 

Proof. This follows by taking y — N(a)~ 1 in the following lemma. □ 

Lemma 4.6. Let (C 9 /A,E) be a principally polarized abelian variety, and B 
a (g x 2g) complex matrix whose columns form a symplectic basis of A. Given 
M G GL 2g (Q), let A' be the lattice in C 9 generated by the columns of BM t . 
Then the following are equivalent: 

1. there exists y £ Q x such that yE is a principal polarization for C 9 /A' 
and the columns of BM t form a symplectic basis, 

2. M £ GSp 2g (Q)+. 

Moreover, if this is the case, then the point in H corresponding to C is t' = Mr, 
and we have y = v(M)~ l . 

Proof. Interpret B as a (2g x 2g) real matrix by identifying C with R + iR. Let 
£ be the matrix of E with respect to the standard basis of R 2s . Then we have 

B t £B = n. 

Note that yE satisfies all properties in the definition of a principal polariz- 
ation, except possibly that yE : (u, v) > yE(iu, v) is positive definite, and that 
E maps A' x A' to Z with determinant 1. The first property is equivalent to 
y > 0, while the second is implied by symplecticity of C. In particular, part 1 
is equivalent to the existence of y > in Q with y(BM) t £BM = fi. In other 
words, part 1 is equivalent to the existence of y > in Q with M*f2M = y — 1 S1, 
i.e., to M £ GSp 2g (Q)+. This also shows v{M) = y~ l . 

Finally, write B = (Bi\B 2 ) and note r = B^ 1 B 1 . We get BM t = {B l0 } + 
B2& t |Bic t + S 2 d t ) ) hence t' = (Bic t + B 2 <P)- 1 (Bia t + B 2 b t ). Cancelhng B^ X B 2 
on the right hand side, we find r' = (re* + o? t ) _1 (Ta t + c*). The fact that r and 
t' are symmetric matrices yields r' = (or + 6)(cr + = M t r. □ 
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4.3 Decomposing g(x) modulo the stabilizer 

The bridge between adelic and ideal theoretic class field theory is the surjection 

K T */K TX -> I{NF)/P(NF) 

that maps the class of an idele x = 1 mod x NF to the class of the ideal a with 
ordp(a) = ordp(xp) modulo the ray P(NF) = {(a) : a = 1 mod x NF}. 

Let a be a fractional Ok* -ideal coprime to NF. Let the notation be as in 
Theorem 12.41 and pick any idele x = (x v ) v £ K 1 ^ such that 

1. for any finite prime p of K r , we have ord p (a: p ) = ord p (a), and 

2. for any valuation v of K r with v(NF) > 0, we have x v = 1. 
Then we immediately have 

g(x) = l 2g mod x NF, (4.1) 

where g — e o iV$ r is as in Theorem 13.41 

At the same time, we also have the following. 

Lemma 4.7. Let g(x) be as above and M as in Theorem l2.4l Then the matrix 
A := gix^M- 1 lies in GSp 2g (Z) x GSp 2g (R) + . 

Proof. Let us recall the situation of Theorem 12.41 we have a symplectic basis 
B = . . . \b g ) of b with respect to and a symplectic basis C = (ci| . . . \c g ) = 
BM t of 7V$r C i(a)~ 1 b with respect to E N / a \£. 

Note v o g = N k ,/q, so the fact that K Y has no real embeddings implies 
v{g{x))oo > 0, i.e., g{x)oo € GSp 2g (R) + . We also have M g GSp 2g (Q) + by 
Lemma |4. 51 hence S GSp 2g (R) + . It now suffices to prove for every prime 
number p that A p is in GSp 2g (Z p ). for x £ L^, write x p £ L <S> Z p for the part 
corresponding to primes over p. 

We have the following identity of Z p -submodules of K <£> Z p of rank 2g: 

(^(o)"^) ® Z p = N&(x)- \b <E> Z p ) 

(indeed, for p \ FN, both sides are equal to b <E) Z p , while for p \ F, the 
order is locally maximal and the identity follows from ord p (a) = ord p (x p )). We 
have already chosen a basis c%, . . . ,c 2g of the left hand side. We take the Z p - 
basis N<s>i(x)~ 1 bi, . . . , N$r(x)~ 1 b2g of the right hand side and notice that A p 
is the matrix that transforms one basis to the other. In particular, we have 
A p £ GL 2g (Z p ). As the basis on the left is symplectic for A^(a)^ and the one 
on the right is symplectic for 7V(x) p £, we apply the localization of Lemma [4.61 
and find A p £ GSp 2g (Q p ). As we already had A p £ GL 2g (Z p ), we conclude 
A p £ GSp 2g (Z p ). ' □ 

Proof of Theorem \2.4\ We already know M £ GSp 2g (Q) + by Lemma l4~5l which 
is the first statement in Theorem 12.41 

Next, we have gix)' 1 =AMwithA£ GSp 2g (Z)xGSp 2g (R)+ by LemmafCTl 
The reciprocity law (Thm. I3.4[) now tells us f(r) x = f AM (r). By Proposi- 
tion 13.31 we find that A acts as (A mod N) does on /. Moreover, we have 
A = M _1 mod x NF by (|4"Tj) . so the definition of U in Theorem [2^41 is equival- 
ent to U = {A mod N). Conclusion: f(r) x = f u (Mr). □ 
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Proof of Theorem \2.3[ Theorem 12.31 is a special case of Theorem [53] as follows. 
Pick c z = Then Mr = t since multiplication by is a C-linear 

isomorphism that transforms one symplectic basis into the other. At the same 
time, the matrix M is the transpose of the matrix of multiplication by fi , 
hence U is the transpose of the matrix of multiplication by ji, □ 

4.4 Determining the ideal group 

Next, we prove Theorem l2.2l A similar result exists in terms of fields of moduli 
of torsion points (Main Theorem 3 in §17 of[50]), but we give a proof directly 
in the language of the fields Fm using the reciprocity laws. 

Proof of TheoremUTM Note that Theorem 1513"! already implies that H^ i0 (N) 
acts trivially on H(N), so that it remains to prove only the converse, and without 
loss of generality only for integral ideals a. 

Let a £ I(NF) be an integral ideal with /(r) n = /(r) for all / £ F N , Let 
U and M be as in Theorem [531 so tnat f° r au / € F N , we get /(t) = f(r) a = 
f u {Mr) with U £ GSp 2ff (Z/iVZ) and M £ GSp 2g (Q)+ such that (M mod NF) 
is finite and invertible with inverse U . We claim that without loss of generality, 
we have U = 1, M = 1 mod x N and Mr = r. 

Proof of the claim: By taking / = £jy, we find Cr}^ — Ov, hence U £ 
Sp 2g (Z/AZ). Then lift U to Sp 2ff (Z), and use the lift to change the chosen 
basis ci,...,c g of Theorem 12.31 We find that without loss of generality, we 
have {7 = 1, which implies M = 1 mod x N. We now have f(r) = /(Mr) for 
all / e Fn, and by [IS1 (2.5.1)], this implies r e T^Mt, i.e., r = 7Afr for 
some 7 € Tat. We use 7 to change the basis Ci, . . . , c g again, and conclude also 
Mt = t. This proves the claim. 

Let X = M _1 , so X ee 1 mod x TV and It = r. Let c = 2V**,o(a). We have 
ccO and X sends a basis c\, . . . , c 2g of c _1 fa to a basis 61, ... , b 2g of b C c _1 b, 
hence X £ Mat 2ff (Z). The congruences on M now tell usXeTjv. 

The fact Xt = t shows that there is an isomorphism h : C 9 /<i>(c -1 b) — > 
C 9 /<i>(b) = A preserving symplectic bases. The identity map on C 9 induces 
an isogeny the other way around, which scales the polarization by N(a). Their 
composite is some fi £ End(A) = O, which therefore satisfies /i _1 b = c _1 b and 
iXp, = N(a) £ Q. This last identity shows that fi is coprime to F, so if we look 
at the coprime-to-F part of /i _1 b = c _1 b and use that the coprime-to-f 1 part 
of b is invertible, then we find fiO = c. 

By definition of /1, h, and X, the endomorphism fi acts as M on the 
chosen symplectic bases (i.e., e(/x) = M). Corollary 14.31 therefore shows fi = 
1 mod x NO. □ 

4.5 Complex conjugation 

Next, we prove the results in Section I5T51 

Proof of Lemma \2.6\ Recall Aio — ^(/(r) : / £ Fi), and consider the exten- 
sion H(l) = MqK 1 /Mo- Part 1 is to prove that this extension has degree 2 if 
and only if there exist a £ 1(F) and fi £ K x such that A^$r j( p(a)b = /ib and 
Hji £ Q. 
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Any non-trivial automorphism 70 of this extension restricts to complex con- 
jugation on K 1 ', so 7 : x 1— > a; 70 is an element of G&l(H(l)/K T ). Note that 7 and 
complex conjugation are equal on A4o- 

Next, suppose r corresponds to (b,£), and let A be the corresponding prin- 
cipally polarized abelian variety. Then by [HI Prop. 3.5.5], the abelian variety 
A corresponds to (b,£). The automorphism 7 then corresponds to the class of 
an ideal a of K r such that N^(a)b = fib and N(a) = /j,Jl for some /1 G K x . 
This proves one implication of part 1; the other follows by reading our argument 
backwards. 

For part 2, in case 3 = 1 and O = Ok, we simply take a = N$(b/b) and 
fx = 1 as N$r is an isomorphism with inverse A$. 

If g = 2 and O = O k , take a = N$(b) and /z = N(b). We claim N&N<j,(b) = 

N(b)bb , which implies part 2. Proof of the claim: let <fi : K — > K T extend an 
element of $, and let a G Aut(A) be such that (</> o a)i K is the other element. 
Then N^N^(b) = b 2 cr(b)cr~ 1 (b). On the other hand, as $ is a primitive CM- 
type, we see from Example 8.4(2)] that the embeddings of K into K are 
exactly id, a, cr^ 1 , and complex conjugation, so A^$rA$(b) = N(b)bb 

Finally, if b = O, then b = O = O, so o = 1 and \i = 1 suffice. □ 

Proof of Proposition \2.7\ Assume that H(l)/A^o is an extension of degree 2, so 
a, fj, and 70 as in the proof of Lemma 12.61 exist. By scaling a (and scaling fi 
accordingly), we can assume a to be coprime to NF. 

Let /(t) be any class invariant with / G J-n- Now /(t) is in A4q if and only 
if f{rV° = f(r), i.e., if and only if /(r)H = /(r). 

The action of complex conjugation on /(r) is easy to describe. Note that 
mod n) jg j w ith its Fourier coefficients replaced by their complex conjug- 
ates. Since complex conjugation is continuous on C, we get by (12.11) 

7(7) = r ( - lmodiV) (-T). (4.2) 

Let's look at the action of [a] via the reciprocity law Theorem 12.41 Let 
b\ , . . . , 02 g be the symplectic basis of b corresponding to r and consider the 
basis 

C = (n^ 1 ^, . . . , n^bg, -n~ 1 b g+ i, . . . , -n~ 1 b 2g ) 

of /i _1 b = A r $r C ,(a) _1 b. This basis differs from the basis in Proposition 12 . 71 by 
the action of i(— 1), and it is a symplectic basis with respect to = N(a)£. 
The period matrix corresponding to this symplectic basis is — r. 

In particular, the transformation between the bases B and C" is given by 
M rt = M t i(-1), where M is as in Proposition O This shows that M' satisfies 
the conditions of Theorem l2.4l so that we get M' G GSp 2£ ,(Q) + and M' is finite 
and invertible modulo N. Let U' G GSp 29 (Z/A^Z) be its inverse, so we get 
/(r)W = f u \M'r) = f u '(-r). 

Combining this with flU}, we find f(r)M = /^( r ) with J7 = [/'i(-l). We 
conclude that indeed f u (r) — /(r) if and only if /(r) G A4o- 

Finally, if /(r) is in A^o and generates "H(l) over X r , then we get 

TO(r)) : < [A4 : «S] = [H(l) : A' r ] = [K<{f{r)) : A r ], 

so the minimal polynomial of f(r) over K T is also the minimal polynomial 
over Kq. This finishes the proof of Proposition 12.71 □ 
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5 Theta constants 

For c\ , c 2 E Q 9 , the theta constant with characteristic c\ , c 2 is 

6[ci,c 2 ](t)= ^2 exp(7ri(w + cx)t{v + c{f + 2m(v + c{)c\). 
vezs 

This is a modular form with a very explicit action, as the folowing result 
shows. 

Theorem 5.1. Given D E 2Z and C\ , c 2 , c[ , c' 2 E D~ 1 Z 9 , we have 

0[ci,c 2 ] 



8[c' 1)C ' 2 ] 



e T t 



N 



for N = 2D 2 . Moreover, the action of GSp 2g (Z/iVZ) is as follows. Given any 
A E GSp 2g (Z/iVZ), take lifts 

® € Mat 2gx2g (Z) and ieZ 

0/ A and j/(^4) _1 fnote i/iat these lifts can be obtained coefficient-wise, i.e., we 
only need to lift elements from (Z/iVZ) to Z). Define 

d A= A <( c i-f di ^ cdt A and 

d 2 J yc 2 - iMiag(a6 t ) y / 

r = ^(t(dd 1 - cd 2 f(-bd l + ad 2 + diag(a&*)) - d\d 2 ), 
and define d' 1; d' 2 , r' analogously. Then we have 

It is known that the field generated by all quotients / as in Theorem 15.11 
equals the field (see e.g. 1!). 27.15]). In particular, every element of .Foo is a 
rational functions in theta functions. We can evaluate the action of Sp 2g (Z/7VZ) 
on such a rational function via Theorem l5 . 1 I without the need of lifting to Sp 2g (Z). 

We actually restrict to theta constants with Ci E [0, l) 9 , because we have 

9[ci + m, c 2 + n 2 ] = exp(27ricin 2 )#[ci, C2] for rai, ra 2 G Z 9 . (5.2) 

In particular, if we fix D, then there are only finitely many theta constants to 
consider. 

We prove the theorem by starting with the action of Sp 2g (Z) on theta con- 
stants. 

Lemma 5.2. Given A E Sp 2g (Z), there is a holomorphic p — pa : H g — > C* 
such that for all c\ , c 2 E Q 9 , we have 

6[ Ci ,c 2 ]{At) = p(T)exp(2TTir)9[d 1 ,d 2 ](T), 

where d\, d 2 , r are as in the formulas of Theorem 15.11 with t = 1. 
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Proof. This follows with some algebraic manipulation from Formula 8.6.1 and 
Lemma 8.4.1(b) of pQ (see also [TTl Prop. 1.3]). Indeed, define c 1 = d. L . 

M[cY = dc 1 - cc 2 + -diag(cd*), and 

M[c} 2 = -be 1 + ac 2 + -diag(a6 t ), 

following [TJ Lemma 8.4.1(b)]. This can be rewritten as 

V M W J \ d 2 J 2 \ diag(a6 t ) J 

As fL4i7 _1 is the inverse of A 1 , we conclude M[c] 1 = c*. Formula 8.6.1 of [1 
then gives exactly this result. □ 

Remark 5.3. A little bit more is known about the function pa (see also [TJ 
Exercise 8.11(9)]). Choose a holomorphic branch of y/det(cr + d); then there 
exists k(A) £ (($) such that pa{t) = K,(A)y/det(cT + d). Moreover, k(A) can 
be computed by evaluation of of Lemma 15.21 in suitable c, r; and the map 
k 2 : Sp 2ff (Z) — > (£4) is a homomorphism. Finally, if 2 | g, then k(y4) 4 = 1. 

Proof of Theorem \5.1\ for the case A £ Sp 2g (Z/iVZ). Let / be a quotient of theta 
constants as in Theorem 15.11 We start by proving / £ J-jy. Note first that if 
A £ Sp 2ff (Z) is trivial in Sp 29 (Z/7VZ), then the formulas give di = Cj mod DZ 2 
and r € Z, so exp(27rir) = 1 and 6[d\, d 2 ] = 9[c\, c 2 ]. Multiplying the numerator 
and denominator of / by 6[0, 0] 7 and using pa(t) 8 — (det cr + d) 4 fRemark !5.3p . 
we thus find that / is a quotient of modular forms of equal weight and of level N 
with Fourier coefficients in Q(Gv)- 

Next, we need to prove that the given action is valid for any A £ Sp 2g (Z/7VZ). 
So take such an A, and note that there exists a lift (a', b'\ d , d') £ Sp 2g (Z) of A 
and a lift t' = 1 £ Z of v{A)~ 1 . Let (a, b; c, d) and t be arbitrary lifts as in the 
theorem. Then (a, b; c, d) = (a', b';c', d') and t = t' modulo N = 2D 2 . As in the 
previous paragraph, we note that the formulas depend only on these matrices 
and numbers modulo N = 2D 2 , which proves that the action is correct for 
A £ Sp 2s (Z/7VZ), even when defined in terms of arbitrary lifts in Mat2 SX 2 3 (Z) 
and Z. □ 

To finish the proof of the theorem, we need the action of i((Z/iVZ) x ). 

Lemma 5.4 ([T71 Prop. 1.7]). Let D be an even positive integer and ci,C2 £ 
D- X ZP. LctN = 2D 2 . The action of t £ (Z/NZ) X on is given by 0[c 1 ,c 2 ] t = 
0[ci,tc 2 }. 

Proof. The Fourier coefficients are finite sums of factors exp(27ri(w + ci)c 2 ) from 
the definition of 8[c\, c 2 \. These factors are iV-th roots of unity, so the action is 
simply raising them to the power t, i.e., multiplying c 2 by t. □ 

Proof of Theorem \5.1[ We have already proven the result for A £ Sp 2£ ,(Z/2£> 2 Z). 
Any element A' £ GSp 2g (Z/2£> 2 Z) can be written as A' = AM with M = i(t) 
and t = v{A). Starting from (|5.1D for A, we compare what happens when we 
either multiply A by M from the right, or act on the right hand side of (|5.1[) 
by t. The latter replaces (di,d 2 ) with {d\,td 2 ) and r with tr. 
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If A = (a,b;c,d), then A' = AN = (a,tb;c,td) and v(A') = tv(A), so that 
(dijdz) gets replaced with (di,td,2) modulo 2DZ 2g , as it should be. Moreover, 
this replaces r with tr modulo Z, which finishes the proof. □ 

6 Class invariants 

Given an order O in a CM-field K and a CM-type $ of K, a class invariant is 
a value /(t) with / € .Foo that generates the class field over K 1 . 

For example, if K is quadratic and = Z + tZ, then j(r) is a class in- 
variant, and its minimal polynomial over K is called the Hilbert class poly- 
nomial Hq £ Z[X]. Weber |29j gave class invariants of imaginary quadratic 
orders with minimal polynomial that have much smaller coefficients than Hq. 
As mentioned in the introduction, we are interested in having such smaller class 
invariants, but not just for imaginary quadratic fields. For CM-fields of de- 
gree 2g > 2, we can compare the class invariants with known generators of T\, 
such as for g = 2 the absolute Igusa invariants [7] . 

For any / g .Fjv, we check the inclusion K r (f(T)) C 'H(l) (equivalently /(r) £ 
%(1)) using Theorem 12. 31 If / is sufficiently general, then the inclusion of fields 
is an equality, which can be verified numerically using (|2.2I) . Equation (I2.2j) also 
allows us to numerically determine the minimal polynomial of f(r) over K r . 

6.1 A detailed example 

As an example, we will look for small / that are quotients of products of theta 
constants with ci,c 2 £ {0, ^} 2 , that is, g = 2, D = 2, N = 8. We also 
include this example as a demonstration in the code [53] , so it could be followed 
step by step on a computer. The theta constants for which 4ciC2 is odd are 
identically zero, and we are left with 10 so-called even theta constants, which 
happen to have Fourier coefficients in Z. Following [4], we use the notation 
9[(a, b), (c, d)} =: 9ieb+8a+4d+2c for a, b,c,d £ {0, |}, so the even theta constants 
are 6 k for k £ {0, 1, 2, 3, 4, 6, 8, 9, 12, 15}. 

We choose the quartic CM-field K = Q(a) = Q[A]/(A 4 + 27A 2 + 52) 
with real quadratic subfield K = Q(\/521). This is the field K from [2"51 
Example III. 3. 2]. Take the CM-type $ of K consisting of the two embeddings 
K — > C that map a to the positive imaginary axis. Let w be the (positive) 
square root of 13. The real quadratic subfield of the reflex field K 1 is Q(u>). 

We start by finding one pair (b,£) and a corresponding t as in [5S] or [25) . 
In our case, this is b = O, £ = 2(-5882941509a 3 - 146560028765a)" 1 . We 
take r corresponding to the symplectic basis 

| (12075a 3 + 5774a 2 + 300821a + 143846, 

- 27037a 3 - 9188a 2 - 673565a - 228898, 
12075a 3 + 24150a 2 + 300821a + 601642, 

- 29924a 2 - 745488) 

of b. 

Next, we compute the image of the map 

T ■ H^ {N) > GS P2s (Z/7VZ)/5 
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from Section 12.71 To list the generators on the left hand side, the following 
lemma limits the elements of the class group that need to be checked. 

Lemma 6.1. In the case g = 2, the square of every element a of #$,0(1) is an 
ideal of K q times a principal ideal of K r . 

Proof. Given a, let fj.be & generator of iV$r(a) as in the definition of ^$^(1). 

Let <7 be the non-trivial automorphism of Kq. One can check N$(N$(a)) = 
iV(a)aa _1 . Indeed, this (with $ and 5> r swapped) is [331 Lemma 1.8.4], and also 
appears in the proof of Lemma 12.61 

Next, note N(a) = (da) ■ er(aa), so we get N$(fi) — a 2 / a(N K / Ko (a), which 
finishes the proof. □ 

In the specific example we are treating right now, the class number of K r 
is odd and the class number of Kq is one, so the lemma implies that actu- 
ally -£^0(1) is the group of principal ideals. So we restrict to principal ideals (a) 
and have r((aj) — e(iV$ r (a)). We only need (a) up to H$ y o(N), which contains 
the group of elements that are 1 modulo 8, so we only need a modulo 8. So we 
compute a set of generators of the group (Ok'/(&)) x — Cf 2 X C| and compute 
N<$,r and e with respect to the chosen symplectic basis of b. 

The generators map to 6 matrices in GSp 29 (Z/8Z). These 6 matrices gen- 
erate the image of the map r, and as said in the introduction, we look for 
functions / fixed by this image, i.e., fixed by these 6 matrices. 

Ignoring the factors p, the set of 8th powers of the ten even theta constants 
is acted on by GSp 2 „(Z/8Z). It is partitioned into 4 orbits under the action of 
our matrices: {0g,0f,0f}, {0f ,0§,0? 6 }, {0 8 12 }. 

Let us restrict our search for class invariants to those functions / that are 
products of powers of the theta constants. To ensure / 8 is fixed by the image 
of g, we must use whole orbits, that is, write 

/ = Cs(^0^6^l)' £ (O2O3O4) 1 (#8#9#15) m #l2 

with k + l + m + n = 0. 

Actually, we also want /(r) to be real, so we restrict to / that is fixed under 
the action of U from Proposition 12.71 It turns out that this action swaps the 
first two orbits, so to ensure /(r) 8 is real, we take k — I. In fact, we like to 
use small products of theta constants, so we leave out this product of six theta 
constants and take k — I = 0. We then get m = —n, so 



/ = Cs 



0?2 



79<7i5 



Note that if 8 divides both k and I, then we have /(r) E but to let 

/(t) have small height, we want to take n > as small as possible. Explicitly 
computing the action of U and of the image of g on / for small k and n, we find 
that k = n = 2 gives a function that is invariant under U and the image of g, 
that is, such that f(r) £ H(l) n R. 

So now we have our potential class invariant /(r) and we would like to com- 
pute its minimal polynomial over K Y . The Galois group is the group of invertible 
fractional ideals of K T modulo the ideal group i?*,e>(l) of Theorcm l2.2l In this 
particular case, the group H^e^l) is the group of principal ideals, as mentioned 
below Lemma \6. 11 so we iterate over the class group of K r . 
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For each of the 7 ideal classes of K T , we compute U and M as in The- 
orem [531 We make sure that the basis C is such that Mr is reduced for the 
action of GSp 29 (Z) (see for example Section 8] for how to reduce Mr, 
then apply the same transformation to C), so that the theta constants can be 
numerically evaluated most efficiently. 

Then we compute f u and evaluate it numerically at Mr to get a root of the 
minimal polynomial of /(r) over K 1 '. This gives us a numerical approximation 
of the minimal polynomial 

H f = H(X-f u (MT))€K< [X], 

and we recognize its coefficients as elements of Kq C C with the LLL-algorithm 
as in jTUJ Section 7]. 

We find that numerically with high precision, we have 

3 8 101 2 H f = 66928761X 7 + (21911488848™ - 76603728240)X 6 
+ (-203318356742784™ + 733099844294784)X 5 
+ (-280722122877358080™ + 1012158088965439488)X 4 
+ (-2349120383562514432™ + 8469874588158623744)X 3 
+ (-78591203121748770816™ + 283364613421131104256)X 2 
+ (250917334141632512™ - 904696010264018944)X 
- 364471595827200™ + 1312782658043904, 

which is significantly smaller than the smallest minimal polynomial o bta ined 
when using Igusa invariants, even with the small Igusa invariants from |26j : 

I0l 2 fl"i = 10201X 7 

+ (155205162116358647755W + 559600170220938887110)X 6 

+ (152407687697460195175920750535594152550to 

+ 5495137327680949562589706361 18192859400)X 5 
+ § (2201909580030523730272623848434538048317834513875™ 

+ 7939097894735431844153019089320973153011210882125)X 4 
+ (1047175262927393182849164587480891367594710449395570625™ 

+ 3775644104882200832865729346429752069380200097845736875)X 3 
+ i(907392914800494855136752991106041311116404713247380607234375™ 

+ 3271651681305911192688931423723753094763461200379169938284375)X 2 
+ (15014166049656519860045880222971244113390650525905069987454062500™ 

+ 54134345550367190785605984445586939893083531851405365978411062500)X 
+ ^(320854170291151322128777010521751890513120770505490537777676328984375™ 

+ 1156856162931200670387093211443242850125709667683265459917987279296875). 

Because the first polynomial is so much smaller, we need a much lower 
precision to reconstruct it from a numerical approximation. As our invariant / 
is built up from the same theta constants as the absolute Igusa invariants (see 
[261 Section 8]), it takes the same time to evaluate it to any given precision, so 
saving precision in this way means saving time. 

6.2 More examples 

We searched for class invariants with D = g = 2 for a few more fields. For each 
of the fields we tried, the results were similar to Section l6Tl We made a couple 
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such examples available online at [24] . 

Recently, Andreas Enge and Emmanuel Thome computed the Igusa class 
polynomials of the maximal order O k of the field K = Q[X]/(X A + 310A 2 + 
17644) of class number 3948. 

It turns out that the functions 

t _ 00^8 j- _ ( \ j. v — ( ® ® 2 \ c jr 

are class invariants for a certain r with CM by Ok- We have yet to find out 
how much these class invariants would speed up their computation. 

7 Applications 

7.1 Class fields 

By definition of a class invariant, the minimal polynomial of any class invariant 
gives an equation defining H(l), and it is easy to compute numerically. However, 
with the j-invariant or Igusa invariants, this polynomial can have coefficients 
that are too large to be practical. Smaller class invariants would reduce this 
size. 

7.2 Curves of genus two with prescribed Probenius 

In this section, we sketch the CM method for constructing curves of genus two, 
and finish by showing how class invariants give a practical improvement. 

7.2.1 The CM method 

We would like to construct a ^-dimensional abelian variety over a finite field 
with a prescribed characteristic polynomial / of the Frobenius endomorphism tt. 
Indeed, when choosing / appropriately, this yields curves of genus one or two 
with a prescribed number of points, or with good cryptographic properties [3J. 

The idea of the CM construction is to start with an abelian variety A in 
characteristic zero with a nice endomorphism ring 0, and take the reduction A 
of A modulo a prime. The endomorphism ring of the reduction A will contain 
both 7r and the endomorphism ring O of A. A lack of room will then relate 7r 
to O, giving us the control we need. 

In more detail, let's assume for simplicity that / is irreducible. The field 
K = Q[X]/(f) is a CM-field of degree 2g, the constant coefficient /(0) = p 2m 
is a prime power, and the root ttq = (X mod /) is a so-called Weil p m -number, 
i.e., satisfies 7To7fo = p m . 

Now take any abelian variety A/k with k D K r such that A has CM by Ok- 
Let $ be the CM-type of A and ty/p a prime of k. Suppose A has good reduction 
at *P and let A be the reduction. Let tt € End(A) be the Frobenius endomorph- 
ism of A. Reduction modulo *P gives an embedding Ok = End(A) C End(A) 
and we have the following result. 

Theorem 7.1 (Shimura-Taniyama formula [20, Thm.l in §13]). The endo- 
morphism 7r is an element of the ring Ok C End(A) and generates the ideal 
N^(N k/Kl (y)) ofO K - 
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This, together with the fact irlr = ^(Ok/ty) 9 determines tt up to roots of 
unity. In fact, by taking k to be minimal, we get 7r = ttq up to roots of unity, 
i.e., up to twists of A. 

This CM method is practical for g < 2, where one does not write down 
defining equations for A, but only computes some elements of T\ evaluated 
at A. In case g = 1, it suffices to take the j-invariant, while in the case g = 2, 
one takes a triple of absolute Igusa invariants, i.e., generators of T\. 

In the case g = 1, the elliptic curve A can be reconstructed from j(A) mod *}3 
by a simple formula found in any textbook on elliptic curves. In the case g = 2, 
for generic values of the Igusa invariants modulo one can reconstruct A as 
the Jacobian of a hyperelliptic curve using Mestre's algorithm [TT]. 

In the CM method for g = 1, the value j(r) is usually represented by its 
minimal polynomial, the Hilbert class polynomial. Reduction modulo a prime 
is done by taking the reduction modulo p of the Hilbert class polynomial, 
and taking a root of that in F p . 

In the case g = 2, one can take a minimal polynomial Hi 1 of the first Igusa 
invariant, ii(A), over K T , and let ii and «3 be represented by polynomials 

where sum and product range over G&\(H(l) / K 1 ) . Reducing H il modulo po = 
*}3 H Kq and taking any root is equivalent to reducing i\(A) modulo a prime 
over po- Changing <p without changing po will change the ideal in Theorem l7.1l at 
most by complex conjugation, which will not affect the characteristic polynomial 
of Frobenius. We can then find 12(A) and 13(A) by computing 

in{ A) = 

h[M a )) 

if p is sufficiently large. 

7.3 Class invariants for genus one 

In the case g = 1, the use of class invariants in the CM method is standard. 
Let Hf be the minimal polynomial of a class invariant /(r), and let §>f t j(X, Y) 6 
Q(X)[F] be such that $fj(j, Y) € Q(j)[y] is the minimal polynomial of / € J"jv 
over T\ = Q(j). Then $/j(j(r), f(r)) = 0, so we can find j(r) by solving for 
•V in •!•/ ,(. V./(-:: 0. " 

For the CM- method, we now only compute Hf and Here can be 

precomputed once for every function / € Tn that we would like to use for class 
invariants, and Hf is much smaller, hence needs less precision, than the Hilbert 
class polynomial Hj. We compute f(r) modulo a prime over by taking a 
root of Hf modulo p (and call it /). Then we compute j(A) by solving for X 
in <tVv.Y./i 0. 

7.4 Class invariants for genus two 

For genus two, modular polynomials are much harder to compute, and the 
analogue of solving $f,j(X,f) = means finding a Groebner basis, which is 
hard as well. 
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Instead, we work with polynomials 

H fjin =Y,in{AV \{{X - f(AY) G K*[X\. 

7 a 

In fact, if the conditions of Proposition 12 . 71 are satisfied, then these polynomials 
are in IsT^X], We find / as in the elliptic case, and compute i n (A) for n = 1, 2, 3 
from it by the formula 

ini A) = h^m. 

H' f (f) 

The downside of this is that we get four polynomials instead of the three 
polynomials that we had when not using class invariants. Still, all of these 
polynomials can be a lot smaller than the original polynomials, as the size of all 
four of them is dominated by the height of /, which is hopefully much smaller 
than the height of i\. 

For the example from Section RTTl we have computed the polynomials Hf, Hf^, 
and made them available online at [24]. These four polynomials together take 
up 15% less space than the three polynomials H^, Hi 1: i n , and the largest coef- 
ficient (which determines the precision at which theta constants need to be 
evaluated, the dominant step) is 40% smaller. And this is just one easily found 
class invariant, for the first field that was tried. 
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